Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Mq-5wUoZ8Fh1AQgEByRHJbIV3L0.roa
File: Mq-5wUoZ8Fh1AQgEByRHJbIV3L0.roa (raw, json)
Hash identifier: uNb3a/s2SQNi9P4LNJH38exDDPlvTcrFIq2z5/npsdo=
Subject key identifier: 32:AF:B9:C1:4A:19:F0:58:75:01:08:04:07:24:47:25:B2:15:DC:BD
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01988723C39B1382669E320FEA252043AE22
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Mq-5wUoZ8Fh1AQgEByRHJbIV3L0.roa
Signing time: Fri 08 Aug 2025 00:45:24 +0000
ROA not before: Fri 08 Aug 2025 00:45:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51202
IP address blocks: 31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
89.36.32.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
185.121.133.0/24 maxlen: 24
185.121.135.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
185.144.71.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
212.232.19.0/24 maxlen: 24
2a0c:2500::/29 maxlen: 48
2a0c:2501::/32 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:23:c3:9b:13:82:66:9e:32:0f:ea:25:20:43:ae:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Aug 8 00:45:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32afb9c14a19f0587501080407244725b215dcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:53:2c:39:76:6c:9e:d0:1a:e0:30:21:44:
24:e4:09:b0:64:09:c7:12:8b:e8:0c:2d:cd:b2:45:
4a:05:2b:b8:11:e9:ca:d4:96:ba:a3:dd:60:04:be:
11:2b:06:8d:15:f4:4b:4d:1d:67:76:24:c5:ad:64:
6c:b2:8a:13:b9:d9:b1:85:ff:40:ba:b1:9a:89:5c:
ef:3b:52:8a:de:d7:84:63:ae:f3:9f:5b:22:77:ca:
a1:bf:1d:25:be:18:c5:c1:da:6f:21:3f:6b:bf:37:
e6:d9:f8:9f:03:0e:d7:fb:c4:18:75:e1:29:c0:39:
cd:ea:a4:bc:c9:66:81:40:0b:41:dc:6e:11:0f:84:
59:5a:0e:84:ca:f3:3f:53:9b:8a:b3:02:bf:a8:ce:
8e:75:49:ed:64:de:6c:8b:d3:9c:5f:fe:30:ae:17:
47:22:79:75:c8:bd:84:33:e0:b3:d1:ae:6e:5f:ba:
9c:ff:1e:e7:c0:d4:6b:e6:e2:4c:a3:ec:2a:70:00:
fb:60:8d:dc:67:f0:e9:66:03:4c:52:c1:3f:be:7e:
26:3d:c0:5c:d7:32:68:a8:a1:00:9c:23:7b:89:f6:
9b:c1:6e:2f:75:af:97:a7:c7:4a:cf:77:d0:16:e2:
1d:2b:24:0f:cc:bb:95:7d:77:66:a6:f5:d8:12:de:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AF:B9:C1:4A:19:F0:58:75:01:08:04:07:24:47:25:B2:15:DC:BD
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Mq-5wUoZ8Fh1AQgEByRHJbIV3L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
62.169.152.0/24
89.36.32.0/24
89.36.35.0/24
185.121.133.0/24
185.121.135.0/24
185.144.70.0/23
212.232.18.0/23
IPv6:
2a0c:2500::/29
2a14:6781::/32
Signature Algorithm: sha256WithRSAEncryption
6c:93:26:c3:66:33:76:84:31:1c:9a:5e:4c:56:9b:07:bc:3e:
d3:fc:ed:71:ed:d5:16:d9:ff:28:40:65:04:40:f3:df:3b:a9:
4e:66:66:78:dd:18:e7:a6:96:ac:c6:88:8c:9c:8e:cf:4e:e3:
1b:71:87:75:b2:3a:75:eb:66:42:d8:83:55:f9:72:d3:9d:00:
d2:af:3c:bd:28:e0:03:e0:df:26:5a:00:78:d1:37:02:95:0e:
0f:9b:ef:85:c1:6d:8f:94:e5:4a:22:2c:51:2a:4f:00:ee:14:
f4:bd:74:4d:cc:5a:38:a6:3e:74:c2:60:c7:16:c2:01:cb:6e:
24:f4:09:9f:6e:40:06:68:98:77:1e:ad:02:1a:25:cc:66:79:
46:de:86:95:93:3e:b4:27:69:ac:76:98:70:74:a8:cb:8b:89:
d5:b6:49:34:54:7d:6a:30:8f:54:7a:92:55:4e:b2:52:a1:2a:
a5:e4:ab:0a:d4:6a:bd:22:c5:8b:2b:8f:23:f2:12:0c:b5:df:
24:17:26:1f:53:d5:25:52:99:ab:53:97:18:4e:14:23:85:64:
cb:1d:d0:c1:39:c4:a0:10:fe:39:46:93:a1:70:b7:ed:9a:0d:
0e:d3:ba:b8:a0:97:23:89:57:22:68:33:dc:52:6e:ab:0d:ec:
ce:ee:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:08 2025 by rpki-client